Getting Data In

How to stop splunkd.exe from creating crash dump files under var\log\splunk on a universal forwarder?

sylim_splunk
Splunk Employee
Splunk Employee

On the universal forwarder, splunkd.exe is creating many crash dump files that are filling up disk space, which affects the services on the server. Please let me know if you have any configurations to disable crash dumping.

0 Karma
1 Solution

sylim_splunk
Splunk Employee
Splunk Employee

Crash dump by splunk provides a lot of useful information to troubleshoot the root case of the issues. We would like to recommend you to keep it enabled unless it affects the genuine services of the server due to the dump files.

Please find the information below for your reference;

View solution in original post

sylim_splunk
Splunk Employee
Splunk Employee

Crash dump by splunk provides a lot of useful information to troubleshoot the root case of the issues. We would like to recommend you to keep it enabled unless it affects the genuine services of the server due to the dump files.

Please find the information below for your reference;

Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...